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Amendments to the Specification: 

Please replace paragraph [0035] with the following amended paragraph: 

- [0035] Figure 3 is a block diagram 300 illustrating an embodiment of the invention. A set of 
data objects and core applications 310 , such as that discussed in Figure 2, is interfaced with an 
audit manager 305. — 

Please replace paragraph [0050] with the following amended paragraph: 

- [0050] Home tab 405 (see also 502 of Figure 5) corresponds to a default, or home, display- 
where relevant daily information is presented to users. In Figure 4, the screen display 400 
corresponds to an example home page, and the Home tab 405 is shaded to indicate to the user 
that the home page is the current display. — 

Please replace paragraph [0057] with the following amended paragraph: 

- [0057] Before being deployed by an enterprise, business process need to be certified. 
Certification ensures that the process complies with the standards of the enterprise. In an 
embodiment, selection 506 additionally displays the certification status of a business process 
(e.g., via Process Definition 508) . Example values of certification status include "Requested", 
which indicates that certification is requested, "Certified," which indicates that the manager or 
employee responsible for a process has certified that this process has been approved, and 
"Attested," which indicates that an auditor has verified the adequacy of the controls of a business 
process. - 
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Please replace paragraph [0070] with the following amended paragraph: 

— [0070] Selection 518 enables auditors to monitor the effectiveness of controls. The Audit 
manager 501 utilizes the Performance Management Framework (PMF) integrated with a set of 
workflow-enabled applications to assign process objectives to a business process. The PFM 
PMF can define process objectives as either control objectives or performance objectives. For 
example, the Accounts Receivable Department of a company may have performance objectives 
that are consistent with minimizing working capital requirements. An example of a 
performance objectives might be to minimize Days Sales Outstanding. The accounts receivable 
department may also have control objectives that are consistent with separation of credit granting 
authority and sales commitments. An example of a control objective might be to minimize Costs 
of Bad Debt. - 

Please replace paragraph [0071] with the following amended paragraph: 

~ [0071] The PFM PMF enables users to associate one or more key performance indicators 
(KPI), which are quantitative measurements of compliance with a control or performance 
objective, to a business process. KPI can also be associated with controls to monitor risk 
mitigation. Each KPI has a desired objective value. The PFM PMF continuously monitors the 
KPI for deviations from the desired objective value. Any deviations in KPI values outside a 
defined tolerance value triggers an audit event. ~ 

Please replace paragraph [0072] with the following amended paragraph: 

- [0072] Selection 518 allows auditors to review the control and performance objectives 
associated with a business process, and enables auditors to add additional control and 
performance objectives in the form of KPI to business process. This allows auditors to 
determine whether control and performance objectives are in place to allow management to see if 
its objectives are being met. By integrating the PFM PMF with the business processes defined 
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by the audit manager, the audit manager enables managers and auditors to monitor the 
enterprise's performance with regard to both process objectives and risk mitigation. - 

Please replace paragraph [0082] with the following amended paragraph: 

— [0082] Set up tab 538 enables auditors and audit department managers to perform the 
administrative functions such as assigning the audit schedules 544 to organizations 540 or 
business processes, defining segregations of duties, and recording incompatible functions. Audit 
can be scheduled on an organizational basis. For example, you may choose to audit the accounts 
receivable department every six months. - 

Please replace paragraph [0083] with the following amended paragraph: 

~ [0083] Segregation of duties is implemented to prevent employee malfeasance. Set up tab 
538 allows auditors to define pairings of specific functions within one or more business 
processes that must not be available to the same user (e.g., business process mapping 542) . In an 
embodiment of the invention integrated with a set of workflow-enabled application, the 
workflow-enabled applications automatically record the identity of the user performing each 
function in a business process. This is compared with the pairings of segregated functions 
defined by the auditors to ensure segregation of duties. - 

Please replace paragraph [0115] with the following amended paragraph: 

— [0115] Additionally, the hosted audit 1205 provides auditors with a central interface to all 
audit related tasks. In an embodiment, the hosted audit service 1205 provides a central interface 
similar to audit manager 305. The hosted audit service 1205 enables auditors to create and 
manage audit projects. This embodiment of the hosted audit service 1205 provides auditors with 
planning functions, task assignment functions, progress tracking functions, communication 
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functions, and document management functions (e.g., via core applications 1210) , similar to 
those described for audit manager 305. The hosted audit service 1205 can be used to schedule 
audits automatically. - 
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